Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmYbdtmxyaqXnGaTGSepx1ZvbLA.roa
File: nmYbdtmxyaqXnGaTGSepx1ZvbLA.roa (raw, json)
Hash identifier: 2qYB5g6VTAM2jgve5VdROOf+rYKZmAiv8+x+jXTX1Ug=
Subject key identifier: 9E:66:1B:76:D9:B1:C9:AA:97:9C:66:93:19:27:A9:C7:56:6F:6C:B0
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A061703CC7731FB9E80737AEF8BAFAE30A
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmYbdtmxyaqXnGaTGSepx1ZvbLA.roa
Signing time: Wed 02 Sep 2026 09:25:40 +0000
ROA not before: Wed 02 Sep 2026 09:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204150
IP address blocks: 201.4.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:70:3c:c7:73:1f:b9:e8:07:37:ae:f8:ba:fa:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 2 09:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e661b76d9b1c9aa979c66931927a9c7566f6cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:b2:73:fc:13:ad:4f:79:d0:2a:e5:5c:8b:
e4:b5:18:8d:ac:57:12:42:ec:11:3c:ed:52:a1:17:
b3:64:00:af:aa:c2:12:bc:86:1f:8b:66:25:8d:4f:
82:af:c5:55:f2:36:a8:7d:b8:9b:1a:ac:33:e4:d5:
17:03:69:a6:65:ce:ea:66:01:8b:88:01:2b:3d:f4:
e0:7c:5e:73:aa:ee:ee:f4:4c:7d:61:d9:cc:fd:ec:
3d:78:ef:d3:e3:c7:60:d6:0e:cf:05:4f:5a:f9:9b:
80:60:b6:65:74:c1:08:bb:a8:68:1c:5f:40:ad:b4:
f7:c9:7e:e4:b1:d3:3a:cc:15:14:ab:a7:8a:56:da:
d2:fe:24:da:8a:41:40:2b:54:17:90:f3:b2:7f:83:
34:6b:43:00:7d:73:83:75:90:26:2e:05:c5:20:ac:
78:d1:ae:d9:e6:50:0d:b7:77:5b:76:5e:da:df:06:
4c:6a:5f:c7:62:28:48:7e:fb:5f:9d:77:22:f8:df:
a4:6a:ef:31:bd:8b:59:24:6b:71:6f:87:97:37:bc:
f4:23:2e:76:36:32:67:22:9c:ab:44:9c:33:f9:92:
9c:b2:50:f1:72:a3:8b:32:2d:91:82:41:a0:99:10:
a4:6f:c5:25:af:40:8e:aa:c3:fc:d4:94:66:fa:ed:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:1B:76:D9:B1:C9:AA:97:9C:66:93:19:27:A9:C7:56:6F:6C:B0
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/nmYbdtmxyaqXnGaTGSepx1ZvbLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.66.0/24
Signature Algorithm: sha256WithRSAEncryption
50:16:46:0d:51:ab:5d:cb:8f:f9:22:86:f5:4d:b0:4a:04:7c:
5e:b8:4a:90:4c:a3:49:cc:69:6b:5d:b7:93:b3:9c:f4:d7:7b:
5c:78:ed:af:eb:8e:43:20:e2:9f:73:35:de:1d:c1:92:ca:e5:
20:77:3d:6f:be:44:69:35:5f:b2:7d:c9:02:8f:d4:f8:ae:11:
80:81:bc:47:a5:71:5f:35:9b:36:49:50:14:f5:f6:34:e2:a0:
62:ad:cb:b1:57:aa:00:83:fb:16:01:b4:58:c7:92:ea:b3:69:
6e:0c:c5:41:85:7d:f7:a7:28:4b:20:5e:eb:12:91:28:e4:54:
11:5b:3f:a4:0e:9d:94:f7:9e:ad:14:35:50:45:8a:d5:43:d3:
f9:50:33:b5:75:d3:f2:44:08:c5:bd:9b:ec:81:69:68:e9:8e:
79:37:86:13:7c:25:f0:50:c7:9d:2c:18:f5:23:b1:cc:a6:8e:
6d:0a:43:55:a4:d6:af:63:9e:e6:e5:27:d1:8c:e9:cd:2d:7a:
af:eb:77:a6:5d:fa:9b:97:48:f1:21:02:fa:2b:8d:1b:4e:ee:
8e:0f:42:19:ac:1f:ff:84:6e:7d:8d:14:90:c0:08:b6:93:8f:
48:e9:25:cb:98:aa:59:74:8b:f5:e5:54:5b:23:09:94:da:fe:
62:03:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:56 2026 by rpki-client